696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:39 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x22, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 187.146008][T15477] loop4: detected capacity change from 0 to 270 [ 187.156277][T15479] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0xff02 02:21:39 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:39 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xffd7, 0x0, 0x0, 0x0) [ 187.233958][T15491] ref_ctr_offset mismatch. inode: 0x361c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x40004 [ 187.243884][T15480] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.260678][T15498] loop4: detected capacity change from 0 to 270 02:21:39 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:39 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 187.280758][T15502] loop5: detected capacity change from 0 to 264 02:21:39 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:39 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x11000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:39 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:39 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x20000, 0x0, 0x0, 0x0) [ 187.456418][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.464507][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 187.476477][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.484611][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 187.528219][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.536281][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 187.562776][T15525] loop5: detected capacity change from 0 to 264 [ 187.567628][T15526] loop4: detected capacity change from 0 to 270 02:21:39 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x10e, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 187.578091][T15506] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.586171][T15506] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:39 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x11000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:40 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 187.632463][T15524] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:40 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:40 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x110, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 187.703614][T15544] loop4: detected capacity change from 0 to 270 [ 187.716925][T15547] loop5: detected capacity change from 0 to 264 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:40 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x40000, 0x0, 0x0, 0x0) 02:21:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) sendfile(r2, r1, 0x0, 0x100000002) [ 187.827414][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.835425][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 187.848138][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.856174][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 187.906287][T15561] loop5: detected capacity change from 0 to 264 [ 187.917348][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 187.925340][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 187.929488][T15566] loop4: detected capacity change from 0 to 270 [ 187.940382][T15542] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:40 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x5f8, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 187.950640][T15542] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:40 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:40 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 188.060617][T15579] loop4: detected capacity change from 0 to 270 02:21:40 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xff01, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:40 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) sendfile(r2, r1, 0x0, 0x100000002) 02:21:40 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x50000, 0x0, 0x0, 0x0) [ 188.223603][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.231843][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 188.243789][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.252180][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860021000000000000211a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6530505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800a800220000000000002200000000000000007809140b2a3a08000000010000010846494c45312e3b3100525205018d4e4d0a010066696c6531505824016da100000000a16d010000000000000100000000000000000000000000000000534c31010008000003746d70001573797a2d696d61676567656e393632343934303438000566696c6530000566696c653054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08000000000000", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xd000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 188.298293][T15602] loop5: detected capacity change from 0 to 216 [ 188.301750][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.312802][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 188.349019][T15585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.357069][T15585] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:40 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:40 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x1000000, 0x0, 0x0, 0x0) [ 188.436325][T15616] loop5: detected capacity change from 0 to 208 02:21:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) sendfile(r2, r1, 0x0, 0x100000002) 02:21:40 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}, {&(0x7f0000010f00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0xc800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 188.590793][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.598878][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 188.611318][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.619387][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 188.656743][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 188.664776][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 188.689755][T15633] loop5: detected capacity change from 0 to 200 [ 188.691260][T15620] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:41 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x2000000, 0x0, 0x0, 0x0) 02:21:41 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="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", 0x200, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 188.704048][T15620] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 188.814422][T15644] loop5: detected capacity change from 0 to 192 [ 188.926481][T15606] loop4: detected capacity change from 0 to 270 02:21:41 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xff0f, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:41 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:41 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:41 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:41 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3000000, 0x0, 0x0, 0x0) [ 189.105602][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.113596][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.125636][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.133653][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 189.174177][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.182201][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.184969][T15663] loop5: detected capacity change from 0 to 184 02:21:41 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 189.224696][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.232744][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 189.265336][T15668] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:41 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 189.351519][T15679] loop5: detected capacity change from 0 to 184 02:21:41 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x4000000, 0x0, 0x0, 0x0) [ 189.434794][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.442923][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.457539][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.465535][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:41 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 189.511539][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.519849][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.538403][T15690] loop5: detected capacity change from 0 to 184 [ 189.563419][T15655] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.571446][T15655] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 189.658040][T15697] loop5: detected capacity change from 0 to 192 [ 189.718885][T15667] loop4: detected capacity change from 0 to 270 02:21:42 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:42 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 189.900958][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.908970][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.921346][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.929440][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 189.963506][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.971536][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 189.983471][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 189.991497][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:42 executing program 1: semget$private(0x0, 0x20000000102, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:42 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x8000000, 0x0, 0x0, 0x0) 02:21:42 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 190.080111][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.088142][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.100947][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.109047][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:42 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 190.149243][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.157281][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.172660][T15722] loop5: detected capacity change from 0 to 192 02:21:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 190.199913][T15708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.207965][T15708] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:21:42 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:42 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 190.307784][T15735] loop5: detected capacity change from 0 to 192 02:21:42 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 190.459021][T15713] loop4: detected capacity change from 0 to 270 [ 190.477363][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.485368][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.498157][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.506174][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 190.545320][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.547365][T15754] loop5: detected capacity change from 0 to 192 02:21:42 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2c000, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:42 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:42 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xa000000, 0x0, 0x0, 0x0) 02:21:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:21:42 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 190.553455][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.583096][T15734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.591236][T15734] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:42 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:43 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 190.654183][T15770] loop5: detected capacity change from 0 to 192 02:21:43 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:21:43 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xc020000, 0x0, 0x0, 0x0) [ 190.804783][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.812825][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.825444][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.833461][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 190.885732][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.893858][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 190.918782][T15776] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 190.921785][T15791] loop5: detected capacity change from 0 to 192 02:21:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 190.926830][T15776] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:43 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:43 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860021000000000000211a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e", 0x100, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:43 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:43 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xf000000, 0x0, 0x0, 0x0) [ 191.534402][T15768] loop4: detected capacity change from 0 to 270 02:21:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:43 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 191.628671][T15818] loop5: detected capacity change from 0 to 192 [ 191.680893][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 191.688949][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 191.702148][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 191.710168][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:44 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x18000000, 0x0, 0x0, 0x0) 02:21:44 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 191.764438][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 191.772484][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 191.790549][T15831] loop5: detected capacity change from 0 to 192 02:21:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 191.820021][T15812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 191.828054][T15812] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:44 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 191.875010][T15843] loop5: detected capacity change from 0 to 192 [ 192.024989][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.033055][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 192.058670][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.066703][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 192.114012][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.122032][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 192.135640][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.143647][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 192.221504][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.229517][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 192.241830][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.249832][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 192.279861][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.287894][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 192.299540][T15848] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 192.307598][T15848] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:45 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:45 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:45 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x18020000, 0x0, 0x0, 0x0) 02:21:45 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:45 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a0802", 0x80, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 192.786366][T15866] loop5: detected capacity change from 0 to 192 02:21:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:45 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 192.908066][T15880] loop5: detected capacity change from 0 to 192 02:21:45 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x20000000, 0x0, 0x0, 0x0) [ 192.993121][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 193.001273][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 193.013455][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 193.021488][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 193.073181][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 193.081212][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 193.117381][T15892] loop5: detected capacity change from 0 to 192 [ 193.126193][T15861] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 193.134285][T15861] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:46 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="ebfe906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:46 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:46 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:46 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x24000000, 0x0, 0x0, 0x0) 02:21:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:46 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b22732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:46 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 193.756385][T15917] loop4: detected capacity change from 0 to 270 [ 193.766765][T15919] loop5: detected capacity change from 0 to 192 02:21:46 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:46 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2c732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:46 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x3c000000, 0x0, 0x0, 0x0) [ 193.871790][T15932] loop5: detected capacity change from 0 to 192 [ 193.892684][T15934] loop4: detected capacity change from 0 to 270 [ 193.981500][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 193.989526][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.001533][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.009568][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:46 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 194.061306][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.065977][T15947] loop5: detected capacity change from 0 to 192 [ 194.069504][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.094881][T15950] loop4: detected capacity change from 0 to 270 [ 194.113969][T15908] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.122079][T15908] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:46 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:46 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2e732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 194.227398][T15963] loop5: detected capacity change from 0 to 192 [ 194.285165][T15972] loop4: detected capacity change from 0 to 270 [ 194.342043][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.350070][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.363267][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.371290][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 194.408808][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.416844][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.432462][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.440510][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 194.520081][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.528158][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.540729][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.548741][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:46 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x41020000, 0x0, 0x0, 0x0) 02:21:46 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:46 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b2f732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:46 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 194.577719][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.585770][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.597436][T15969] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.605404][T15969] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 194.651232][T15990] loop5: detected capacity change from 0 to 192 [ 194.656281][T15986] loop4: detected capacity change from 0 to 270 02:21:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809", 0x60, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732f66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:47 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x58000000, 0x0, 0x0, 0x0) [ 194.809468][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.817564][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 194.829746][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.837986][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 194.886124][T16014] loop5: detected capacity change from 0 to 192 [ 194.888446][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.894400][T16017] loop4: detected capacity change from 0 to 270 [ 194.900447][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b6673fe66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 194.958328][T15987] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 194.966456][T15987] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:47 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 195.023220][T16031] loop5: detected capacity change from 0 to 192 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e22617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 195.076602][T16037] loop4: detected capacity change from 0 to 270 02:21:47 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x67e0939d, 0x0, 0x0, 0x0) 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 195.142456][T16040] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 195.206451][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.214658][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 195.227080][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.235542][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 195.288975][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.294365][T16062] loop5: detected capacity change from 0 to 192 [ 195.297018][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2c617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 195.329778][T16065] loop4: detected capacity change from 0 to 270 [ 195.350402][T16041] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.358427][T16041] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 195.398586][T16066] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:47 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:47 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x91ffffff, 0x0, 0x0, 0x0) 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 195.450289][T16079] loop5: detected capacity change from 0 to 192 02:21:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 195.500592][T16083] loop4: detected capacity change from 0 to 270 02:21:47 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2e617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:48 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x9d93e067, 0x0, 0x0, 0x0) [ 195.631706][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.639775][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 195.652628][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.660681][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 195.697605][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.705638][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 195.706259][T16102] loop5: detected capacity change from 0 to 192 [ 195.726233][T16105] loop4: detected capacity change from 0 to 270 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e2f617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 195.754280][T16081] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 195.762390][T16081] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 195.800157][T16103] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.833057][T16119] loop5: detected capacity change from 0 to 192 02:21:48 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66612200028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 195.860059][T16122] loop4: detected capacity change from 0 to 270 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xcbbeffff, 0x0, 0x0, 0x0) 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000", 0x40, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:48 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 195.988080][T16139] loop5: detected capacity change from 0 to 192 [ 196.068499][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.076725][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.088806][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.096821][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:48 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 196.144789][T16148] loop5: detected capacity change from 0 to 192 [ 196.145385][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.159064][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.179926][T16150] loop4: detected capacity change from 0 to 270 02:21:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66612c00028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 196.204572][T16126] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.212705][T16126] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:48 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 196.260436][T16163] loop5: detected capacity change from 0 to 192 [ 196.262326][T16156] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:48 executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 02:21:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617402028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 196.306495][T16171] loop4: detected capacity change from 0 to 270 02:21:48 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xd7ff0000, 0x0, 0x0, 0x0) 02:21:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d020000000000000200"/72, 0x48, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 196.406330][T16183] loop5: detected capacity change from 0 to 192 [ 196.461264][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.469367][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.482809][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.490919][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 196.535047][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.543100][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.549912][T16196] loop4: detected capacity change from 0 to 270 [ 196.560992][T16197] loop5: detected capacity change from 0 to 192 [ 196.575183][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:48 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 196.583276][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 196.596206][T16196] FAT-fs (loop4): bogus logical sector size 514 [ 196.602542][T16196] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:49 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 196.701361][T16196] loop4: detected capacity change from 0 to 270 [ 196.726168][T16196] FAT-fs (loop4): bogus logical sector size 514 [ 196.732435][T16196] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:49 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617403028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:49 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xd7ffffff, 0x0, 0x0, 0x0) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054", 0x4c, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 196.760968][T16226] loop5: detected capacity change from 0 to 192 [ 196.837676][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.845903][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.858070][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.866064][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 196.915467][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.923509][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 196.929512][T16241] loop4: detected capacity change from 0 to 270 [ 196.955808][T16245] loop5: detected capacity change from 0 to 192 [ 196.979169][T16241] FAT-fs (loop4): bogus logical sector size 515 [ 196.980731][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 196.985472][T16241] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 197.000067][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:49 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 197.057300][T16244] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.068379][T16241] loop4: detected capacity change from 0 to 270 [ 197.077316][T16256] loop5: detected capacity change from 0 to 192 [ 197.078021][T16241] FAT-fs (loop4): bogus logical sector size 515 [ 197.089826][T16241] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:49 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617404028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:49 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xe8030000, 0x0, 0x0, 0x0) 02:21:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 197.214084][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.222114][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 197.238541][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.246735][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 197.291251][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.299296][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 197.315131][T16278] loop4: detected capacity change from 0 to 270 [ 197.322151][T16280] loop5: detected capacity change from 0 to 192 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 197.340359][T16278] FAT-fs (loop4): bogus logical sector size 516 [ 197.346657][T16278] FAT-fs (loop4): Can't find a valid FAT filesystem [ 197.369046][T16260] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.377085][T16260] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 197.408821][T16278] loop4: detected capacity change from 0 to 270 [ 197.415676][T16278] FAT-fs (loop4): bogus logical sector size 516 [ 197.421981][T16278] FAT-fs (loop4): Can't find a valid FAT filesystem [ 197.445146][T16290] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001b0000000000001b0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6531505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45322e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6532505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080086001c0000000000001c28230000000023287809140b2a3a08000000010000010846494c45332e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6533505824016d8100000000816d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:49 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 197.461090][T16293] loop5: detected capacity change from 0 to 192 02:21:49 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617405028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:49 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:49 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xf4010000, 0x0, 0x0, 0x0) [ 197.540790][T16301] loop5: detected capacity change from 0 to 192 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:50 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a01", 0x4f, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 197.624458][T16316] loop4: detected capacity change from 0 to 270 [ 197.640268][T16318] loop5: detected capacity change from 0 to 192 [ 197.652343][T16316] FAT-fs (loop4): bogus logical sector size 517 [ 197.658636][T16316] FAT-fs (loop4): Can't find a valid FAT filesystem [ 197.727545][T16316] loop4: detected capacity change from 0 to 270 [ 197.733204][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.735338][T16316] FAT-fs (loop4): bogus logical sector size 517 [ 197.741906][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 197.748246][T16316] FAT-fs (loop4): Can't find a valid FAT filesystem [ 197.761846][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:50 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xf5ffffff, 0x0, 0x0, 0x0) 02:21:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617406028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 197.773964][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 197.835100][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.839385][T16337] loop4: detected capacity change from 0 to 270 [ 197.843121][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 197.865152][T16337] FAT-fs (loop4): bogus logical sector size 518 [ 197.871466][T16337] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:50 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 197.886440][T16339] loop5: detected capacity change from 0 to 192 [ 197.908846][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 197.916917][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 197.936889][T16337] loop4: detected capacity change from 0 to 270 [ 197.944717][T16337] FAT-fs (loop4): bogus logical sector size 518 [ 197.951003][T16337] FAT-fs (loop4): Can't find a valid FAT filesystem [ 197.960199][T16341] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.030231][T16356] loop5: detected capacity change from 0 to 184 [ 198.117334][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.125590][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 198.137514][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.145491][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:50 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617407028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:50 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xfeffffff, 0x0, 0x0, 0x0) 02:21:50 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 198.182794][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.190943][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 198.202070][T16299] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.210140][T16299] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:50 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 198.255980][T16367] loop5: detected capacity change from 0 to 184 [ 198.268687][T16372] loop4: detected capacity change from 0 to 270 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 198.306334][T16372] FAT-fs (loop4): bogus logical sector size 519 [ 198.312597][T16372] FAT-fs (loop4): Can't find a valid FAT filesystem [ 198.346468][T16369] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.377243][T16372] loop4: detected capacity change from 0 to 270 [ 198.384969][T16372] FAT-fs (loop4): bogus logical sector size 519 [ 198.391258][T16372] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:50 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xff0f0000, 0x0, 0x0, 0x0) 02:21:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617408028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 198.435390][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.443433][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 198.455616][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.463624][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 198.517652][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.525679][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 198.539655][T16393] loop5: detected capacity change from 0 to 184 [ 198.547226][T16394] loop4: detected capacity change from 0 to 270 [ 198.573170][T16394] FAT-fs (loop4): bogus logical sector size 520 [ 198.575119][T16366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.579562][T16394] FAT-fs (loop4): Can't find a valid FAT filesystem [ 198.587564][T16366] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:51 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:51 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 198.637332][T16394] loop4: detected capacity change from 0 to 270 [ 198.644321][T16394] FAT-fs (loop4): bogus logical sector size 520 [ 198.650650][T16394] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:51 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617409028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:51 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xffffbecb, 0x0, 0x0, 0x0) [ 198.744490][T16417] loop5: detected capacity change from 0 to 192 [ 198.760665][T16420] loop4: detected capacity change from 0 to 270 [ 198.774604][T16417] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:51 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 198.803562][T16414] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.815134][T16420] FAT-fs (loop4): bogus logical sector size 521 [ 198.821489][T16420] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 198.885559][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.893674][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 198.897388][T16420] loop4: detected capacity change from 0 to 270 [ 198.906758][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.916047][T16420] FAT-fs (loop4): bogus logical sector size 521 [ 198.918952][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 198.925150][T16420] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:51 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740a028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 198.976357][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 198.984379][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 199.020782][T16442] loop5: detected capacity change from 0 to 192 [ 199.054388][T16442] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:51 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x16a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:51 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xffffff91, 0x0, 0x0, 0x0) [ 199.077603][T16410] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.085702][T16410] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 199.113505][T16440] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:51 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 199.159777][T16455] loop4: detected capacity change from 0 to 270 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 199.203381][T16455] FAT-fs (loop4): bogus logical sector size 522 [ 199.209702][T16455] FAT-fs (loop4): Can't find a valid FAT filesystem [ 199.211056][T16466] loop5: detected capacity change from 0 to 192 [ 199.242310][T16455] loop4: detected capacity change from 0 to 270 02:21:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 199.260662][T16455] FAT-fs (loop4): bogus logical sector size 522 [ 199.266976][T16455] FAT-fs (loop4): Can't find a valid FAT filesystem [ 199.296786][T16466] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:51 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xffffffd7, 0x0, 0x0, 0x0) 02:21:51 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:51 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740b028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 199.370469][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.378483][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 199.390778][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.398781][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 199.442665][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.450713][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 199.486572][T16487] loop5: detected capacity change from 0 to 192 [ 199.489288][T16489] loop4: detected capacity change from 0 to 270 [ 199.503114][T16487] isofs_fill_super: root inode is not a directory. Corrupted media? [ 199.514867][T16457] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.523010][T16457] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:51 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x294}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 199.526354][T16489] FAT-fs (loop4): bogus logical sector size 523 [ 199.540305][T16489] FAT-fs (loop4): Can't find a valid FAT filesystem [ 199.569213][T16493] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:51 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 199.591012][T16489] loop4: detected capacity change from 0 to 270 [ 199.613870][T16489] FAT-fs (loop4): bogus logical sector size 523 [ 199.620265][T16489] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 199.675247][T16510] loop5: detected capacity change from 0 to 192 02:21:52 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xfffffff5, 0x0, 0x0, 0x0) [ 199.715776][T16510] isofs_fill_super: root inode is not a directory. Corrupted media? [ 199.728645][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.736691][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 199.759141][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.767170][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 199.812749][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.820798][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 199.839392][T16525] loop4: detected capacity change from 0 to 270 [ 199.851578][T16527] loop5: detected capacity change from 0 to 192 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 199.863290][T16525] FAT-fs (loop4): bogus logical sector size 524 [ 199.869603][T16525] FAT-fs (loop4): Can't find a valid FAT filesystem [ 199.875543][T16501] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 199.884403][T16501] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 199.905601][T16527] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:52 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 199.927140][T16525] loop4: detected capacity change from 0 to 270 [ 199.945012][T16525] FAT-fs (loop4): bogus logical sector size 524 [ 199.951334][T16525] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) 02:21:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740d028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) [ 200.049210][T16551] loop5: detected capacity change from 0 to 192 02:21:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:52 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0xfffffffe, 0x0, 0x0, 0x0) 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) [ 200.092014][T16551] isofs_fill_super: root inode is not a directory. Corrupted media? [ 200.097084][T16557] loop4: detected capacity change from 0 to 270 [ 200.109559][T16557] FAT-fs (loop4): bogus logical sector size 525 [ 200.115988][T16557] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.186983][T16557] loop4: detected capacity change from 0 to 270 [ 200.193686][T16557] FAT-fs (loop4): bogus logical sector size 525 [ 200.200047][T16557] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.230830][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.238880][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 200.240521][T16570] __nla_validate_parse: 1 callbacks suppressed [ 200.240531][T16570] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.251140][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740e028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 200.273691][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 200.328608][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.336708][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 200.345983][T16583] loop4: detected capacity change from 0 to 270 [ 200.365373][T16583] FAT-fs (loop4): bogus logical sector size 526 [ 200.371699][T16583] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0) [ 200.382231][T16585] loop5: detected capacity change from 0 to 192 [ 200.390974][T16544] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.398988][T16544] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 200.410886][T16585] isofs_fill_super: root inode is not a directory. Corrupted media? [ 200.420742][T16583] loop4: detected capacity change from 0 to 270 02:21:52 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x340}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0) [ 200.448092][T16583] FAT-fs (loop4): bogus logical sector size 526 [ 200.454509][T16583] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740f028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0, 0x0) [ 200.565945][T16607] loop5: detected capacity change from 0 to 192 [ 200.574923][T16607] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:52 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2, 0x0, 0x0) 02:21:52 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c453052520501894e4d0a010066696c6530505824016d4100000000416d0200000000", 0x1c0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 200.608281][T16610] loop4: detected capacity change from 0 to 270 [ 200.631611][T16610] FAT-fs (loop4): bogus logical sector size 527 [ 200.637928][T16610] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.663180][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.671257][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 200.683386][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.683491][T16610] loop4: detected capacity change from 0 to 270 [ 200.691403][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 200.699377][T16610] FAT-fs (loop4): bogus logical sector size 527 [ 200.715196][T16610] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.752702][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:53 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617410028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:53 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 200.761067][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 200.782012][T16597] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 200.790152][T16597] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 200.802660][T16626] loop5: detected capacity change from 0 to 192 02:21:53 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 200.863295][T16633] loop4: detected capacity change from 0 to 270 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:53 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3, 0x0, 0x0) [ 200.906389][T16627] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.919107][T16633] FAT-fs (loop4): bogus logical sector size 528 [ 200.925454][T16633] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.944164][T16642] loop5: detected capacity change from 0 to 192 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:53 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617411028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 200.968078][T16633] loop4: detected capacity change from 0 to 270 [ 200.983013][T16633] FAT-fs (loop4): bogus logical sector size 528 [ 200.989514][T16633] FAT-fs (loop4): Can't find a valid FAT filesystem [ 200.995239][T16642] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:53 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 201.064896][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.073063][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.087509][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.095706][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 201.140906][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.149005][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.154311][T16662] loop4: detected capacity change from 0 to 270 [ 201.176585][T16664] loop5: detected capacity change from 0 to 192 [ 201.180105][T16662] FAT-fs (loop4): bogus logical sector size 529 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 201.189126][T16662] FAT-fs (loop4): Can't find a valid FAT filesystem [ 201.197379][T16664] isofs_fill_super: root inode is not a directory. Corrupted media? [ 201.208393][T16641] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.216488][T16641] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:53 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:53 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 201.277320][T16662] loop4: detected capacity change from 0 to 270 [ 201.298631][T16662] FAT-fs (loop4): bogus logical sector size 529 [ 201.305077][T16662] FAT-fs (loop4): Can't find a valid FAT filesystem [ 201.321524][T16682] loop5: detected capacity change from 0 to 192 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 02:21:53 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617412028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:53 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4, 0x0, 0x0) 02:21:53 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 201.350181][T16675] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.369620][T16682] isofs_fill_super: root inode is not a directory. Corrupted media? 02:21:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 201.480623][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.489012][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.501232][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.509803][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 201.546603][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.554637][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.573545][T16704] loop4: detected capacity change from 0 to 270 [ 201.576598][T16681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.585415][T16705] loop5: detected capacity change from 0 to 192 02:21:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:53 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 201.588081][T16681] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 201.605633][T16704] FAT-fs (loop4): bogus logical sector size 530 [ 201.611991][T16704] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617418028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:54 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) [ 201.703937][T16703] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.730300][T16725] loop4: detected capacity change from 0 to 270 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a0878", 0xe0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) [ 201.750915][T16724] loop5: detected capacity change from 0 to 192 [ 201.754737][T16725] FAT-fs (loop4): bogus logical sector size 536 [ 201.763442][T16725] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:54 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x5, 0x0, 0x0) 02:21:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 201.838364][T16725] loop4: detected capacity change from 0 to 270 [ 201.847861][T16725] FAT-fs (loop4): bogus logical sector size 536 [ 201.854220][T16725] FAT-fs (loop4): Can't find a valid FAT filesystem [ 201.860201][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.868896][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.880775][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.888768][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617419028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 201.939869][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 201.947911][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 201.978651][T16747] loop5: detected capacity change from 0 to 192 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 202.004017][T16722] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.012111][T16722] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:54 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 202.059901][T16754] loop4: detected capacity change from 0 to 270 [ 202.068898][T16754] FAT-fs (loop4): bogus logical sector size 537 [ 202.075191][T16754] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 202.112990][T16748] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.116596][T16763] loop5: detected capacity change from 0 to 192 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d010000000000000100", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:54 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x8, 0x0, 0x0) [ 202.156870][T16754] loop4: detected capacity change from 0 to 270 [ 202.166906][T16754] FAT-fs (loop4): bogus logical sector size 537 [ 202.173166][T16754] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617422028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 202.226242][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.234300][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 202.256343][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.264360][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 202.308128][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.316154][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 202.326515][T16782] loop5: detected capacity change from 0 to 192 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x150, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 202.352849][T16785] loop4: detected capacity change from 0 to 270 [ 202.383382][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.391426][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 202.413240][T16785] FAT-fs (loop4): bogus logical sector size 546 [ 202.419639][T16785] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.438743][T16790] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:54 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617448028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 202.464572][T16785] loop4: detected capacity change from 0 to 270 [ 202.483004][T16785] FAT-fs (loop4): bogus logical sector size 546 [ 202.489343][T16785] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.501028][T16801] loop5: detected capacity change from 0 to 192 02:21:54 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xa, 0x0, 0x0) 02:21:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 02:21:54 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 202.605241][T16815] loop5: detected capacity change from 0 to 192 [ 202.618336][T16816] loop4: detected capacity change from 0 to 270 [ 202.631745][T16816] FAT-fs (loop4): bogus logical sector size 584 [ 202.638161][T16816] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 202.676530][T16816] loop4: detected capacity change from 0 to 270 [ 202.688684][T16816] FAT-fs (loop4): bogus logical sector size 584 [ 202.694002][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.694947][T16816] FAT-fs (loop4): Can't find a valid FAT filesystem [ 202.702958][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:55 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661744c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 202.722431][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.730457][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 202.783250][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.791273][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:55 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 202.828336][T16837] loop5: detected capacity change from 0 to 192 [ 202.832668][T16836] loop4: detected capacity change from 0 to 270 [ 202.840934][T16799] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 202.848942][T16799] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) [ 202.873315][T16839] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.884863][T16836] FAT-fs (loop4): bogus logical sector size 588 [ 202.891179][T16836] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 02:21:55 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a4, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 202.948713][T16836] loop4: detected capacity change from 0 to 270 [ 202.954326][T16848] loop5: detected capacity change from 0 to 192 [ 202.964168][T16836] FAT-fs (loop4): bogus logical sector size 588 [ 202.970484][T16836] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf, 0x0, 0x0) 02:21:55 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617468028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 02:21:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:55 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) [ 203.111906][T16868] loop4: detected capacity change from 0 to 270 [ 203.120425][T16870] loop5: detected capacity change from 0 to 192 [ 203.127978][T16868] FAT-fs (loop4): bogus logical sector size 616 [ 203.134240][T16868] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x18, 0x0, 0x0) [ 203.187688][T16868] loop4: detected capacity change from 0 to 270 [ 203.196014][T16868] FAT-fs (loop4): bogus logical sector size 616 [ 203.202285][T16868] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661746c028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 203.240740][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.248762][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.261288][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.269300][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 203.315312][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.324061][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.336999][T16889] loop4: detected capacity change from 0 to 270 [ 203.346700][T16889] FAT-fs (loop4): bogus logical sector size 620 [ 203.351368][T16892] loop5: detected capacity change from 0 to 192 [ 203.352997][T16889] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:55 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x24, 0x0, 0x0) [ 203.357320][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.373816][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 203.396744][T16889] loop4: detected capacity change from 0 to 270 [ 203.413776][T16889] FAT-fs (loop4): bogus logical sector size 620 [ 203.420080][T16889] FAT-fs (loop4): Can't find a valid FAT filesystem [ 203.451417][T16887] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.502209][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.510256][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.522270][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.530295][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:55 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:55 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:55 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:55 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3c, 0x0, 0x0) 02:21:55 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617474028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 203.572318][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.580472][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.593166][T16849] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.601217][T16849] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:56 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:56 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x58, 0x0, 0x0) [ 203.660944][T16925] loop4: detected capacity change from 0 to 270 [ 203.663142][T16922] loop5: detected capacity change from 0 to 192 [ 203.679186][T16925] FAT-fs (loop4): bogus logical sector size 628 [ 203.685521][T16925] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000", 0x188, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617478028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:56 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a", 0x4e, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 203.721262][T16921] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.748996][T16925] loop4: detected capacity change from 0 to 270 [ 203.757383][T16925] FAT-fs (loop4): bogus logical sector size 628 [ 203.763747][T16925] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 203.828134][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.836357][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.849250][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.857367][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 203.908401][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.916431][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 203.940639][T16947] loop5: detected capacity change from 0 to 192 [ 203.961241][T16951] loop4: detected capacity change from 0 to 270 [ 203.973303][T16951] FAT-fs (loop4): bogus logical sector size 632 [ 203.979672][T16951] FAT-fs (loop4): Can't find a valid FAT filesystem [ 203.986339][T16915] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 203.994336][T16915] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:56 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:56 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:56 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1f4, 0x0, 0x0) [ 204.005209][T16949] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661747a028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 204.041489][T16951] loop4: detected capacity change from 0 to 270 [ 204.055300][T16951] FAT-fs (loop4): bogus logical sector size 632 [ 204.061595][T16951] FAT-fs (loop4): Can't find a valid FAT filesystem [ 204.081822][T16967] loop5: detected capacity change from 0 to 192 02:21:56 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x20c, 0x0, 0x0) 02:21:56 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.164460][T16979] loop4: detected capacity change from 0 to 270 [ 204.177366][T16979] FAT-fs (loop4): bogus logical sector size 634 [ 204.183663][T16979] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 204.216101][T16979] loop4: detected capacity change from 0 to 270 [ 204.216748][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.224014][T16979] FAT-fs (loop4): bogus logical sector size 634 [ 204.230347][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 204.232411][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.236636][T16979] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174fe028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 204.262563][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:56 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x380, 0xb800}, {&(0x7f0000010d00), 0x0, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.311747][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.319889][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 204.333992][T16994] loop4: detected capacity change from 0 to 270 [ 204.349361][T16994] FAT-fs (loop4): bogus logical sector size 766 [ 204.351693][T16997] loop5: detected capacity change from 0 to 192 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x196, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.355672][T16994] FAT-fs (loop4): Can't find a valid FAT filesystem [ 204.377256][T16965] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.385400][T16965] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 204.405023][T16994] loop4: detected capacity change from 0 to 270 [ 204.411959][T16994] FAT-fs (loop4): bogus logical sector size 766 [ 204.418250][T16994] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:56 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x218, 0x0, 0x0) 02:21:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001054649", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.478735][T17013] loop5: detected capacity change from 0 to 192 02:21:56 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x3}, {0x4, 0xffff, 0x1000}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:56 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x241, 0x0, 0x0) [ 204.536806][T17020] loop4: detected capacity change from 0 to 270 [ 204.556109][T17020] FAT-fs (loop4): bogus logical sector size 768 [ 204.562443][T17020] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:56 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001054649", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.602766][T17031] loop5: detected capacity change from 0 to 192 [ 204.648367][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.656486][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 204.682855][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:21:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:57 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001054649", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 204.690886][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:57 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x300, 0x0, 0x0) [ 204.745141][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.748276][T17045] loop4: detected capacity change from 0 to 270 [ 204.753192][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 204.772997][T17045] FAT-fs (loop4): bogus logical sector size 1280 [ 204.775940][T17044] loop5: detected capacity change from 0 to 192 [ 204.779375][T17045] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:57 executing program 1 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 204.804266][T17019] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 204.812381][T17019] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 204.852270][T17056] FAULT_INJECTION: forcing a failure. [ 204.852270][T17056] name failslab, interval 1, probability 0, space 0, times 0 [ 204.865026][T17056] CPU: 0 PID: 17056 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 204.873811][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.883854][T17056] Call Trace: [ 204.887227][T17056] dump_stack_lvl+0xb7/0x103 [ 204.891818][T17056] dump_stack+0x11/0x1a [ 204.895971][T17056] should_fail+0x23c/0x250 [ 204.900385][T17056] ? iovec_from_user+0x87/0x2d0 [ 204.905364][T17056] __should_failslab+0x81/0x90 [ 204.910124][T17056] should_failslab+0x5/0x20 [ 204.914655][T17056] __kmalloc+0x66/0x340 [ 204.918919][T17056] iovec_from_user+0x87/0x2d0 [ 204.923600][T17056] ? kstrtoull+0x321/0x360 [ 204.928003][T17056] __import_iovec+0x57/0x2c0 [ 204.932587][T17056] ? do_filp_open+0x18a/0x200 [ 204.937293][T17056] ? fsnotify_perm+0x59/0x2e0 [ 204.942062][T17056] ? __fsnotify_parent+0x32f/0x430 [ 204.947166][T17056] import_iovec+0x69/0x80 [ 204.951502][T17056] do_preadv+0x109/0x230 [ 204.955829][T17056] ? __fget_light+0x21b/0x260 [ 204.960529][T17056] ? __cond_resched+0x11/0x40 [ 204.965297][T17056] ? fput+0x2d/0x130 [ 204.969196][T17056] ? ksys_write+0x157/0x180 [ 204.973803][T17056] __x64_sys_preadv+0x54/0x60 [ 204.978581][T17056] do_syscall_64+0x3d/0x90 [ 204.983166][T17056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 204.989059][T17056] RIP: 0033:0x4665e9 02:21:57 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:57 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:57 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3e8, 0x0, 0x0) 02:21:57 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x500, 0x0, 0x0) [ 204.992946][T17056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.012637][T17056] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 205.021044][T17056] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 205.029016][T17056] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 205.037640][T17056] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 205.045624][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.053602][T17056] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 205.065517][T17045] loop4: detected capacity change from 0 to 270 [ 205.077737][T17045] FAT-fs (loop4): bogus logical sector size 1280 [ 205.084119][T17045] FAT-fs (loop4): Can't find a valid FAT filesystem 02:21:57 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:57 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xa00, 0x0, 0x0) 02:21:57 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a1, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 205.108392][T17078] loop5: detected capacity change from 0 to 192 02:21:57 executing program 1 (fault-call:8 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 205.207443][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.215643][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 205.228020][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.236026][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 205.285401][T17089] loop5: detected capacity change from 0 to 192 [ 205.293975][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.302018][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 205.323253][T17092] loop4: detected capacity change from 0 to 270 [ 205.340437][T17062] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.348943][T17062] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 205.355280][T17095] FAULT_INJECTION: forcing a failure. [ 205.355280][T17095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.361994][T17092] FAT-fs (loop4): bogus logical sector size 1536 [ 205.373011][T17095] CPU: 1 PID: 17095 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 205.379352][T17092] FAT-fs (loop4): Can't find a valid FAT filesystem [ 205.388083][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.388094][T17095] Call Trace: [ 205.388101][T17095] dump_stack_lvl+0xb7/0x103 [ 205.412726][T17095] dump_stack+0x11/0x1a [ 205.416993][T17095] should_fail+0x23c/0x250 [ 205.421459][T17095] should_fail_usercopy+0x16/0x20 [ 205.426488][T17095] _copy_from_user+0x1c/0xd0 [ 205.431065][T17095] iovec_from_user+0xc4/0x2d0 [ 205.435739][T17095] __import_iovec+0x57/0x2c0 [ 205.440467][T17095] ? do_filp_open+0x18a/0x200 [ 205.445131][T17095] ? fsnotify_perm+0x59/0x2e0 [ 205.449882][T17095] ? __fsnotify_parent+0x32f/0x430 [ 205.455064][T17095] import_iovec+0x69/0x80 [ 205.459482][T17095] do_preadv+0x109/0x230 [ 205.463710][T17095] ? __fget_light+0x21b/0x260 [ 205.468386][T17095] ? __cond_resched+0x11/0x40 [ 205.473044][T17095] ? fput+0x2d/0x130 [ 205.476931][T17095] ? ksys_write+0x157/0x180 [ 205.481434][T17095] __x64_sys_preadv+0x54/0x60 [ 205.486096][T17095] do_syscall_64+0x3d/0x90 [ 205.490497][T17095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 205.496401][T17095] RIP: 0033:0x4665e9 [ 205.500282][T17095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.520053][T17095] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 205.528465][T17095] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 205.536436][T17095] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 205.544465][T17095] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 205.552426][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.560387][T17095] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 02:21:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:57 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:57 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xc02, 0x0, 0x0) 02:21:57 executing program 1 (fault-call:8 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:57 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:57 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 205.690001][T17113] loop5: detected capacity change from 0 to 192 [ 205.696830][T17111] loop4: detected capacity change from 0 to 270 [ 205.705801][T17114] FAULT_INJECTION: forcing a failure. [ 205.705801][T17114] name failslab, interval 1, probability 0, space 0, times 0 [ 205.718459][T17114] CPU: 0 PID: 17114 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 205.727293][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.737332][T17114] Call Trace: [ 205.740596][T17114] dump_stack_lvl+0xb7/0x103 [ 205.745214][T17114] dump_stack+0x11/0x1a [ 205.749353][T17114] should_fail+0x23c/0x250 [ 205.753752][T17114] __should_failslab+0x81/0x90 [ 205.758497][T17114] should_failslab+0x5/0x20 [ 205.762980][T17114] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 205.768767][T17114] ? __kmalloc_node+0x30/0x40 [ 205.773433][T17114] __kmalloc_node+0x30/0x40 [ 205.777960][T17114] kvmalloc_node+0x81/0xf0 [ 205.782375][T17114] seq_read_iter+0x145/0x930 [ 205.786950][T17114] ? selinux_file_permission+0x22e/0x530 [ 205.792605][T17114] do_iter_readv_writev+0x2e8/0x360 [ 205.797789][T17114] do_iter_read+0x109/0x4b0 [ 205.802330][T17114] do_preadv+0x13b/0x230 [ 205.806596][T17114] ? __fget_light+0x21b/0x260 [ 205.811344][T17114] ? __cond_resched+0x11/0x40 [ 205.816060][T17114] ? fput+0x2d/0x130 [ 205.819939][T17114] ? ksys_write+0x157/0x180 [ 205.824424][T17114] __x64_sys_preadv+0x54/0x60 [ 205.829095][T17114] do_syscall_64+0x3d/0x90 [ 205.833496][T17114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 205.839373][T17114] RIP: 0033:0x4665e9 [ 205.843244][T17114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.862938][T17114] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 205.871373][T17114] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 205.879412][T17114] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 02:21:58 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 205.887474][T17114] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 205.895425][T17114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.903426][T17114] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 205.928337][T17111] FAT-fs (loop4): bogus logical sector size 1792 02:21:58 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf00, 0x0, 0x0) 02:21:58 executing program 1 (fault-call:8 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 205.934717][T17111] FAT-fs (loop4): Can't find a valid FAT filesystem [ 205.943535][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.951675][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 205.964519][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 205.972577][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 205.975679][T17111] loop4: detected capacity change from 0 to 270 [ 205.992953][T17111] FAT-fs (loop4): bogus logical sector size 1792 [ 205.999322][T17111] FAT-fs (loop4): Can't find a valid FAT filesystem [ 206.024073][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.032102][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:21:58 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174010e8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:58 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1800, 0x0, 0x0) [ 206.057770][T17133] loop5: detected capacity change from 0 to 192 [ 206.070341][T17130] FAULT_INJECTION: forcing a failure. [ 206.070341][T17130] name failslab, interval 1, probability 0, space 0, times 0 [ 206.083075][T17130] CPU: 1 PID: 17130 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 206.091835][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.101904][T17130] Call Trace: [ 206.102707][T17107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.105175][T17130] dump_stack_lvl+0xb7/0x103 [ 206.105196][T17130] dump_stack+0x11/0x1a [ 206.113172][T17107] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 206.117742][T17130] should_fail+0x23c/0x250 [ 206.117767][T17130] __should_failslab+0x81/0x90 [ 206.142056][T17130] ? cgroup_show_path+0x67/0x240 [ 206.147075][T17130] should_failslab+0x5/0x20 [ 206.151680][T17130] kmem_cache_alloc_trace+0x49/0x310 [ 206.156955][T17130] ? cgroup_finalize_control+0xb90/0xb90 [ 206.162603][T17130] cgroup_show_path+0x67/0x240 [ 206.167351][T17130] ? cgroup_finalize_control+0xb90/0xb90 [ 206.172981][T17130] kernfs_sop_show_path+0xa1/0xd0 [ 206.178013][T17130] ? kernfs_sop_show_options+0xb0/0xb0 [ 206.183454][T17130] show_mountinfo+0xfc/0x4e0 [ 206.188027][T17130] m_show+0x34/0x40 [ 206.191815][T17130] seq_read_iter+0x60b/0x930 [ 206.196492][T17130] do_iter_readv_writev+0x2e8/0x360 [ 206.201753][T17130] do_iter_read+0x109/0x4b0 [ 206.206256][T17130] do_preadv+0x13b/0x230 [ 206.210492][T17130] ? __fget_light+0x21b/0x260 [ 206.215145][T17130] ? __cond_resched+0x11/0x40 [ 206.219923][T17130] ? fput+0x2d/0x130 [ 206.223807][T17130] ? ksys_write+0x157/0x180 [ 206.228291][T17130] __x64_sys_preadv+0x54/0x60 [ 206.232956][T17130] do_syscall_64+0x3d/0x90 [ 206.237414][T17130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.243302][T17130] RIP: 0033:0x4665e9 [ 206.247174][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.267006][T17130] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 206.275414][T17130] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 206.283364][T17130] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 206.291328][T17130] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 206.299297][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.307256][T17130] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 206.317045][T17129] __nla_validate_parse: 1 callbacks suppressed [ 206.317059][T17129] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.340890][T17143] loop4: detected capacity change from 0 to 270 02:21:58 executing program 1 (fault-call:8 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 206.373718][T17143] FAT-fs (loop4): bogus logical sector size 3585 [ 206.380119][T17143] FAT-fs (loop4): Can't find a valid FAT filesystem [ 206.426338][T17152] FAULT_INJECTION: forcing a failure. [ 206.426338][T17152] name failslab, interval 1, probability 0, space 0, times 0 [ 206.438998][T17152] CPU: 0 PID: 17152 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 206.447761][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.457808][T17152] Call Trace: [ 206.461085][T17152] dump_stack_lvl+0xb7/0x103 [ 206.465747][T17152] dump_stack+0x11/0x1a [ 206.470392][T17152] should_fail+0x23c/0x250 02:21:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:58 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:58 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1802, 0x0, 0x0) 02:21:58 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:58 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19e, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 206.474796][T17152] __should_failslab+0x81/0x90 [ 206.479568][T17152] ? cgroup_show_path+0x67/0x240 [ 206.484576][T17152] should_failslab+0x5/0x20 [ 206.489079][T17152] kmem_cache_alloc_trace+0x49/0x310 [ 206.494389][T17152] ? cgroup_finalize_control+0xb90/0xb90 [ 206.500049][T17152] cgroup_show_path+0x67/0x240 [ 206.504831][T17152] ? cgroup_finalize_control+0xb90/0xb90 [ 206.510541][T17152] kernfs_sop_show_path+0xa1/0xd0 [ 206.515664][T17152] ? kernfs_sop_show_options+0xb0/0xb0 [ 206.521291][T17152] show_mountinfo+0xfc/0x4e0 [ 206.525959][T17152] m_show+0x34/0x40 [ 206.529888][T17152] seq_read_iter+0x60b/0x930 [ 206.534479][T17152] do_iter_readv_writev+0x2e8/0x360 [ 206.539715][T17152] do_iter_read+0x109/0x4b0 [ 206.544339][T17152] do_preadv+0x13b/0x230 [ 206.548663][T17152] ? __fget_light+0x21b/0x260 [ 206.553331][T17152] ? __cond_resched+0x11/0x40 [ 206.558006][T17152] ? fput+0x2d/0x130 [ 206.561913][T17152] ? ksys_write+0x157/0x180 [ 206.566581][T17152] __x64_sys_preadv+0x54/0x60 [ 206.571266][T17152] do_syscall_64+0x3d/0x90 02:21:58 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2000, 0x0, 0x0) [ 206.575726][T17152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 206.581636][T17152] RIP: 0033:0x4665e9 [ 206.582072][T17158] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.585521][T17152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 206.585540][T17152] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2400, 0x0, 0x0) 02:21:59 executing program 1 (fault-call:8 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 206.585558][T17152] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 206.585569][T17152] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 206.639235][T17152] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 206.647209][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.655223][T17152] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 02:21:59 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617401108001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3c00, 0x0, 0x0) [ 206.705601][T17170] loop4: detected capacity change from 0 to 270 [ 206.724883][T17170] FAT-fs (loop4): bogus logical sector size 3840 [ 206.731293][T17170] FAT-fs (loop4): Can't find a valid FAT filesystem [ 206.798909][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.807038][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 206.819204][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.827430][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:21:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 206.865729][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.873776][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 206.882930][T17182] loop5: detected capacity change from 0 to 192 [ 206.898231][T17186] loop4: detected capacity change from 0 to 270 [ 206.908043][T17184] FAULT_INJECTION: forcing a failure. [ 206.908043][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 206.916838][T17186] FAT-fs (loop4): bogus logical sector size 4097 [ 206.920669][T17184] CPU: 0 PID: 17184 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 206.926997][T17186] FAT-fs (loop4): Can't find a valid FAT filesystem [ 206.935702][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.935715][T17184] Call Trace: [ 206.935721][T17184] dump_stack_lvl+0xb7/0x103 [ 206.942874][T17157] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 206.952429][T17184] dump_stack+0x11/0x1a [ 206.952450][T17184] should_fail+0x23c/0x250 [ 206.955744][T17157] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 206.960296][T17184] __should_failslab+0x81/0x90 [ 206.992688][T17184] ? cgroup_show_path+0x67/0x240 [ 206.997707][T17184] should_failslab+0x5/0x20 [ 207.002213][T17184] kmem_cache_alloc_trace+0x49/0x310 [ 207.007526][T17184] ? cgroup_finalize_control+0xb90/0xb90 [ 207.013161][T17184] cgroup_show_path+0x67/0x240 [ 207.017923][T17184] ? cgroup_finalize_control+0xb90/0xb90 [ 207.023548][T17184] kernfs_sop_show_path+0xa1/0xd0 [ 207.028583][T17184] ? kernfs_sop_show_options+0xb0/0xb0 [ 207.034223][T17184] show_mountinfo+0xfc/0x4e0 [ 207.038817][T17184] m_show+0x34/0x40 [ 207.042651][T17184] seq_read_iter+0x60b/0x930 [ 207.047352][T17184] do_iter_readv_writev+0x2e8/0x360 [ 207.052547][T17184] do_iter_read+0x109/0x4b0 [ 207.057134][T17184] do_preadv+0x13b/0x230 [ 207.057631][T17194] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.061365][T17184] ? __fget_light+0x21b/0x260 [ 207.061385][T17184] ? __cond_resched+0x11/0x40 [ 207.080048][T17184] ? fput+0x2d/0x130 [ 207.083981][T17184] ? ksys_write+0x157/0x180 [ 207.088524][T17184] __x64_sys_preadv+0x54/0x60 [ 207.093186][T17184] do_syscall_64+0x3d/0x90 [ 207.097588][T17184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.103662][T17184] RIP: 0033:0x4665e9 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4102, 0x0, 0x0) [ 207.107543][T17184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.127287][T17184] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 207.135725][T17184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 207.143707][T17184] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 207.151677][T17184] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 02:21:59 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:59 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x5800, 0x0, 0x0) [ 207.159645][T17184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.167612][T17184] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 207.199952][T17186] loop4: detected capacity change from 0 to 270 02:21:59 executing program 1 (fault-call:8 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd7ff, 0x0, 0x0) [ 207.224582][T17186] FAT-fs (loop4): bogus logical sector size 4097 [ 207.230947][T17186] FAT-fs (loop4): Can't find a valid FAT filesystem [ 207.284897][T17211] FAULT_INJECTION: forcing a failure. [ 207.284897][T17211] name failslab, interval 1, probability 0, space 0, times 0 [ 207.297571][T17211] CPU: 1 PID: 17211 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 207.299737][T17212] loop5: detected capacity change from 0 to 192 [ 207.306436][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.306450][T17211] Call Trace: [ 207.306457][T17211] dump_stack_lvl+0xb7/0x103 [ 207.330733][T17211] dump_stack+0x11/0x1a [ 207.334986][T17211] should_fail+0x23c/0x250 [ 207.339429][T17211] __should_failslab+0x81/0x90 [ 207.344244][T17211] ? cgroup_show_path+0x67/0x240 [ 207.349178][T17211] should_failslab+0x5/0x20 [ 207.353848][T17211] kmem_cache_alloc_trace+0x49/0x310 [ 207.359160][T17211] ? cgroup_finalize_control+0xb90/0xb90 [ 207.364795][T17211] cgroup_show_path+0x67/0x240 [ 207.369583][T17211] ? cgroup_finalize_control+0xb90/0xb90 [ 207.375205][T17211] kernfs_sop_show_path+0xa1/0xd0 [ 207.380281][T17211] ? kernfs_sop_show_options+0xb0/0xb0 [ 207.385728][T17211] show_mountinfo+0xfc/0x4e0 [ 207.390302][T17211] m_show+0x34/0x40 [ 207.394090][T17211] seq_read_iter+0x60b/0x930 [ 207.398668][T17211] do_iter_readv_writev+0x2e8/0x360 [ 207.403875][T17211] do_iter_read+0x109/0x4b0 [ 207.408458][T17211] do_preadv+0x13b/0x230 [ 207.412757][T17211] ? __fget_light+0x21b/0x260 [ 207.417504][T17211] ? __cond_resched+0x11/0x40 [ 207.422211][T17211] ? fput+0x2d/0x130 [ 207.426089][T17211] ? ksys_write+0x157/0x180 [ 207.430578][T17211] __x64_sys_preadv+0x54/0x60 [ 207.435389][T17211] do_syscall_64+0x3d/0x90 [ 207.439799][T17211] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.445720][T17211] RIP: 0033:0x4665e9 [ 207.449608][T17211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.469203][T17211] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 207.477617][T17211] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 02:21:59 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400228001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:21:59 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xe803, 0x0, 0x0) 02:21:59 executing program 1 (fault-call:8 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 207.485906][T17211] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 207.494302][T17211] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.502325][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.510282][T17211] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 02:21:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:21:59 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf401, 0x0, 0x0) [ 207.606560][T17232] loop5: detected capacity change from 0 to 192 [ 207.623535][T17235] loop4: detected capacity change from 0 to 270 [ 207.649019][T17235] FAT-fs (loop4): bogus logical sector size 8704 [ 207.654700][T17236] FAULT_INJECTION: forcing a failure. [ 207.654700][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 207.655393][T17235] FAT-fs (loop4): Can't find a valid FAT filesystem [ 207.667977][T17236] CPU: 1 PID: 17236 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 207.683307][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.693434][T17236] Call Trace: [ 207.696718][T17236] dump_stack_lvl+0xb7/0x103 [ 207.701302][T17236] dump_stack+0x11/0x1a [ 207.705459][T17236] should_fail+0x23c/0x250 [ 207.709993][T17236] __should_failslab+0x81/0x90 [ 207.714769][T17236] ? cgroup_show_path+0x67/0x240 [ 207.719695][T17236] should_failslab+0x5/0x20 [ 207.724184][T17236] kmem_cache_alloc_trace+0x49/0x310 [ 207.729633][T17236] ? cgroup_finalize_control+0xb90/0xb90 [ 207.735250][T17236] cgroup_show_path+0x67/0x240 [ 207.740004][T17236] ? cgroup_finalize_control+0xb90/0xb90 [ 207.745624][T17236] kernfs_sop_show_path+0xa1/0xd0 [ 207.750636][T17236] ? kernfs_sop_show_options+0xb0/0xb0 [ 207.756080][T17236] show_mountinfo+0xfc/0x4e0 [ 207.760668][T17236] m_show+0x34/0x40 [ 207.764487][T17236] seq_read_iter+0x60b/0x930 [ 207.769117][T17236] do_iter_readv_writev+0x2e8/0x360 [ 207.774301][T17236] do_iter_read+0x109/0x4b0 [ 207.778786][T17236] do_preadv+0x13b/0x230 [ 207.783093][T17236] ? __fget_light+0x21b/0x260 [ 207.787754][T17236] ? __cond_resched+0x11/0x40 [ 207.792414][T17236] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 207.798150][T17236] __x64_sys_preadv+0x54/0x60 [ 207.802839][T17236] do_syscall_64+0x3d/0x90 [ 207.807279][T17236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.813180][T17236] RIP: 0033:0x4665e9 [ 207.817233][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.836832][T17236] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 02:22:00 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 207.845233][T17236] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 207.853192][T17236] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 207.861287][T17236] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.869274][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.877226][T17236] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 02:22:00 executing program 1 (fault-call:8 fault-nth:8): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 207.908216][T17235] loop4: detected capacity change from 0 to 270 [ 207.916599][T17235] FAT-fs (loop4): bogus logical sector size 8704 [ 207.919366][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.923021][T17235] FAT-fs (loop4): Can't find a valid FAT filesystem [ 207.931102][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 207.933285][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 207.956856][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 208.003741][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.011875][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 208.018461][T17251] loop5: detected capacity change from 0 to 192 [ 208.037258][T17207] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.045273][T17207] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 208.059536][T17254] FAULT_INJECTION: forcing a failure. [ 208.059536][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 208.072207][T17254] CPU: 0 PID: 17254 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 208.081076][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.091127][T17254] Call Trace: [ 208.094413][T17254] dump_stack_lvl+0xb7/0x103 [ 208.096494][T17252] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.099069][T17254] dump_stack+0x11/0x1a [ 208.099089][T17254] should_fail+0x23c/0x250 [ 208.116956][T17254] __should_failslab+0x81/0x90 [ 208.121709][T17254] ? cgroup_show_path+0x67/0x240 [ 208.126682][T17254] should_failslab+0x5/0x20 [ 208.131188][T17254] kmem_cache_alloc_trace+0x49/0x310 [ 208.136478][T17254] ? cgroup_finalize_control+0xb90/0xb90 [ 208.142238][T17254] cgroup_show_path+0x67/0x240 [ 208.147006][T17254] ? cgroup_finalize_control+0xb90/0xb90 [ 208.152641][T17254] kernfs_sop_show_path+0xa1/0xd0 [ 208.157667][T17254] ? kernfs_sop_show_options+0xb0/0xb0 [ 208.163218][T17254] show_mountinfo+0xfc/0x4e0 [ 208.167919][T17254] m_show+0x34/0x40 [ 208.171750][T17254] seq_read_iter+0x60b/0x930 [ 208.176340][T17254] do_iter_readv_writev+0x2e8/0x360 [ 208.181537][T17254] do_iter_read+0x109/0x4b0 [ 208.186218][T17254] do_preadv+0x13b/0x230 [ 208.190457][T17254] ? __fget_light+0x21b/0x260 [ 208.195123][T17254] ? __cond_resched+0x11/0x40 [ 208.199819][T17254] ? fput+0x2d/0x130 [ 208.203789][T17254] ? ksys_write+0x157/0x180 [ 208.208397][T17254] __x64_sys_preadv+0x54/0x60 [ 208.213085][T17254] do_syscall_64+0x3d/0x90 [ 208.217487][T17254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.223376][T17254] RIP: 0033:0x4665e9 [ 208.227335][T17254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:22:00 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:00 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400408001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:00 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xff0f, 0x0, 0x0) 02:22:00 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:00 executing program 1 (fault-call:8 fault-nth:9): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 208.247020][T17254] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 208.255434][T17254] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 208.263408][T17254] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 208.271371][T17254] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.279345][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.287401][T17254] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 208.362736][T17273] FAULT_INJECTION: forcing a failure. [ 208.362736][T17273] name failslab, interval 1, probability 0, space 0, times 0 [ 208.373286][T17275] loop5: detected capacity change from 0 to 192 [ 208.375424][T17273] CPU: 0 PID: 17273 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 208.390413][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.400460][T17273] Call Trace: [ 208.403726][T17273] dump_stack_lvl+0xb7/0x103 [ 208.408387][T17273] dump_stack+0x11/0x1a [ 208.412525][T17273] should_fail+0x23c/0x250 [ 208.416932][T17273] __should_failslab+0x81/0x90 [ 208.421680][T17273] ? cgroup_show_path+0x67/0x240 [ 208.426648][T17273] should_failslab+0x5/0x20 [ 208.431136][T17273] kmem_cache_alloc_trace+0x49/0x310 [ 208.436422][T17273] ? cgroup_finalize_control+0xb90/0xb90 [ 208.442179][T17273] cgroup_show_path+0x67/0x240 [ 208.447086][T17273] ? cgroup_finalize_control+0xb90/0xb90 [ 208.452708][T17273] kernfs_sop_show_path+0xa1/0xd0 [ 208.457808][T17273] ? kernfs_sop_show_options+0xb0/0xb0 [ 208.463381][T17273] show_mountinfo+0xfc/0x4e0 [ 208.468040][T17273] m_show+0x34/0x40 [ 208.471849][T17273] seq_read_iter+0x60b/0x930 [ 208.476423][T17273] do_iter_readv_writev+0x2e8/0x360 [ 208.481700][T17273] do_iter_read+0x109/0x4b0 [ 208.486220][T17273] do_preadv+0x13b/0x230 [ 208.490453][T17273] ? __fget_light+0x21b/0x260 [ 208.495131][T17273] ? __cond_resched+0x11/0x40 [ 208.499857][T17273] ? fput+0x2d/0x130 [ 208.503885][T17273] ? ksys_write+0x157/0x180 [ 208.508383][T17273] __x64_sys_preadv+0x54/0x60 [ 208.513052][T17273] do_syscall_64+0x3d/0x90 [ 208.517459][T17273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.523358][T17273] RIP: 0033:0x4665e9 [ 208.527315][T17273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.547119][T17273] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 208.555620][T17273] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 208.563574][T17273] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 208.571533][T17273] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.579501][T17273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.587612][T17273] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 208.604298][T17271] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:01 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c45", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:01 executing program 1 (fault-call:8 fault-nth:10): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffd7, 0x0, 0x0) [ 208.605071][T17277] loop4: detected capacity change from 0 to 270 [ 208.643980][T17277] FAT-fs (loop4): bogus logical sector size 16384 [ 208.650491][T17277] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 208.731292][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.739347][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 208.751883][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.754202][T17277] loop4: detected capacity change from 0 to 270 [ 208.759903][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:01 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617405f88001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 208.767091][T17277] FAT-fs (loop4): bogus logical sector size 16384 [ 208.783561][T17277] FAT-fs (loop4): Can't find a valid FAT filesystem [ 208.806063][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.814083][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 208.848988][T17299] loop5: detected capacity change from 0 to 192 [ 208.856470][T17301] FAULT_INJECTION: forcing a failure. [ 208.856470][T17301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.869689][T17301] CPU: 1 PID: 17301 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 208.878558][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.886035][T17268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 208.888622][T17301] Call Trace: [ 208.888631][T17301] dump_stack_lvl+0xb7/0x103 [ 208.896624][T17268] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 208.899877][T17301] dump_stack+0x11/0x1a [ 208.919575][T17301] should_fail+0x23c/0x250 [ 208.924047][T17301] should_fail_usercopy+0x16/0x20 [ 208.929073][T17301] _copy_to_iter+0x131/0xbc0 [ 208.933661][T17301] ? check_stack_object+0x61/0x70 [ 208.938698][T17301] ? __virt_addr_valid+0x15a/0x1a0 [ 208.943838][T17301] ? __check_object_size+0x253/0x310 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x20000, 0x0, 0x0) 02:22:01 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 208.949149][T17301] seq_read_iter+0x7f2/0x930 [ 208.953835][T17301] do_iter_readv_writev+0x2e8/0x360 [ 208.959031][T17301] do_iter_read+0x109/0x4b0 [ 208.963540][T17301] do_preadv+0x13b/0x230 [ 208.967788][T17301] ? __fget_light+0x21b/0x260 [ 208.972468][T17301] ? __cond_resched+0x11/0x40 [ 208.977140][T17301] ? fput+0x2d/0x130 [ 208.981043][T17301] ? ksys_write+0x157/0x180 [ 208.985545][T17301] __x64_sys_preadv+0x54/0x60 [ 208.990362][T17301] do_syscall_64+0x3d/0x90 [ 208.994784][T17301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.997337][T17312] loop4: detected capacity change from 0 to 270 [ 209.000674][T17301] RIP: 0033:0x4665e9 [ 209.000690][T17301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.010807][T17312] FAT-fs (loop4): bogus logical sector size 63493 [ 209.030401][T17301] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x40000, 0x0, 0x0) [ 209.030426][T17301] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 209.030437][T17301] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 209.030447][T17301] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.030458][T17301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.030467][T17301] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 209.042314][T17297] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:01 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:01 executing program 1 (fault-call:8 fault-nth:11): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x50000, 0x0, 0x0) [ 209.045384][T17312] FAT-fs (loop4): Can't find a valid FAT filesystem [ 209.146501][T17312] loop4: detected capacity change from 0 to 270 [ 209.147403][T17328] FAULT_INJECTION: forcing a failure. [ 209.147403][T17328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.160458][T17312] FAT-fs (loop4): bogus logical sector size 63493 [ 209.165846][T17328] CPU: 1 PID: 17328 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 209.172215][T17312] FAT-fs (loop4): Can't find a valid FAT filesystem [ 209.180949][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.180962][T17328] Call Trace: [ 209.180968][T17328] dump_stack_lvl+0xb7/0x103 [ 209.205465][T17328] dump_stack+0x11/0x1a [ 209.209621][T17328] should_fail+0x23c/0x250 [ 209.214054][T17328] should_fail_usercopy+0x16/0x20 [ 209.219093][T17328] _copy_to_iter+0x131/0xbc0 [ 209.223685][T17328] ? check_stack_object+0x61/0x70 [ 209.228703][T17328] ? __virt_addr_valid+0x15a/0x1a0 [ 209.233866][T17328] ? __check_object_size+0x253/0x310 [ 209.239192][T17328] seq_read_iter+0x7f2/0x930 [ 209.243771][T17328] do_iter_readv_writev+0x2e8/0x360 [ 209.248957][T17328] do_iter_read+0x109/0x4b0 [ 209.253444][T17328] do_preadv+0x13b/0x230 [ 209.257720][T17328] ? __fget_light+0x21b/0x260 [ 209.262501][T17328] ? __cond_resched+0x11/0x40 [ 209.267262][T17328] ? fput+0x2d/0x130 [ 209.271141][T17328] ? ksys_write+0x157/0x180 [ 209.275627][T17328] __x64_sys_preadv+0x54/0x60 [ 209.280292][T17328] do_syscall_64+0x3d/0x90 [ 209.284706][T17328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.290604][T17328] RIP: 0033:0x4665e9 [ 209.294490][T17328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.314391][T17328] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 209.322795][T17328] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 209.330752][T17328] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 209.338864][T17328] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1000000, 0x0, 0x0) 02:22:01 executing program 1 (fault-call:8 fault-nth:12): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 209.346830][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.354781][T17328] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 209.385877][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:22:01 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174fffe8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 209.393909][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 209.406603][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.414625][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 209.450950][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.458986][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 209.482989][T17339] FAULT_INJECTION: forcing a failure. [ 209.482989][T17339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.489169][T17338] loop5: detected capacity change from 0 to 192 [ 209.496055][T17339] CPU: 1 PID: 17339 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 209.509155][T17338] isofs_fill_super: root inode is not a directory. Corrupted media? [ 209.511087][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.511100][T17339] Call Trace: [ 209.511107][T17339] dump_stack_lvl+0xb7/0x103 [ 209.511127][T17339] dump_stack+0x11/0x1a [ 209.519392][T17322] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 209.529121][T17339] should_fail+0x23c/0x250 [ 209.529147][T17339] should_fail_usercopy+0x16/0x20 [ 209.532415][T17322] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 209.536975][T17339] _copy_to_iter+0x131/0xbc0 [ 209.567135][T17348] loop4: detected capacity change from 0 to 270 [ 209.569651][T17339] ? check_stack_object+0x61/0x70 [ 209.582845][T17348] FAT-fs (loop4): bogus logical sector size 65279 [ 209.585479][T17339] ? __virt_addr_valid+0x15a/0x1a0 02:22:01 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2000000, 0x0, 0x0) [ 209.585505][T17339] ? __check_object_size+0x253/0x310 [ 209.592001][T17348] FAT-fs (loop4): Can't find a valid FAT filesystem [ 209.597083][T17339] seq_read_iter+0x7f2/0x930 [ 209.597110][T17339] do_iter_readv_writev+0x2e8/0x360 [ 209.597130][T17339] do_iter_read+0x109/0x4b0 [ 209.623228][T17339] do_preadv+0x13b/0x230 [ 209.627535][T17339] ? __fget_light+0x21b/0x260 [ 209.632255][T17339] ? __cond_resched+0x11/0x40 [ 209.636925][T17339] ? fput+0x2d/0x130 [ 209.640816][T17339] ? ksys_write+0x157/0x180 [ 209.645376][T17339] __x64_sys_preadv+0x54/0x60 [ 209.650055][T17339] do_syscall_64+0x3d/0x90 [ 209.654537][T17339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.660461][T17339] RIP: 0033:0x4665e9 [ 209.664364][T17339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.684040][T17339] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 209.692460][T17339] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 02:22:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000000800"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:02 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3000000, 0x0, 0x0) 02:22:02 executing program 1 (fault-call:8 fault-nth:13): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 209.700521][T17339] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 209.708477][T17339] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.716436][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.724387][T17339] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 209.777898][T17348] loop4: detected capacity change from 0 to 270 [ 209.794391][T17362] FAULT_INJECTION: forcing a failure. [ 209.794391][T17362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.801343][T17348] FAT-fs (loop4): bogus logical sector size 65279 [ 209.807484][T17362] CPU: 1 PID: 17362 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 209.807505][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.807515][T17362] Call Trace: [ 209.807522][T17362] dump_stack_lvl+0xb7/0x103 [ 209.813940][T17348] FAT-fs (loop4): Can't find a valid FAT filesystem [ 209.822658][T17362] dump_stack+0x11/0x1a [ 209.851219][T17362] should_fail+0x23c/0x250 [ 209.855639][T17362] should_fail_usercopy+0x16/0x20 [ 209.860724][T17362] _copy_to_iter+0x131/0xbc0 [ 209.865404][T17362] ? check_stack_object+0x61/0x70 [ 209.870438][T17362] ? __virt_addr_valid+0x15a/0x1a0 [ 209.875564][T17362] ? __check_object_size+0x253/0x310 [ 209.880864][T17362] seq_read_iter+0x7f2/0x930 [ 209.885450][T17362] do_iter_readv_writev+0x2e8/0x360 [ 209.890647][T17362] do_iter_read+0x109/0x4b0 [ 209.895149][T17362] do_preadv+0x13b/0x230 [ 209.899422][T17362] ? __fget_light+0x21b/0x260 [ 209.904101][T17362] ? __cond_resched+0x11/0x40 [ 209.908791][T17362] ? fput+0x2d/0x130 [ 209.912751][T17362] ? ksys_write+0x157/0x180 [ 209.917264][T17362] __x64_sys_preadv+0x54/0x60 [ 209.921964][T17362] do_syscall_64+0x3d/0x90 02:22:02 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:02 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 209.926824][T17362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.932761][T17362] RIP: 0033:0x4665e9 [ 209.936634][T17362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.956381][T17362] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 209.964828][T17362] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 02:22:02 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4000000, 0x0, 0x0) [ 209.972869][T17362] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 209.980835][T17362] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.988849][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.996820][T17362] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 210.000066][T17374] loop5: detected capacity change from 0 to 192 [ 210.013854][T17367] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:02 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x8000000, 0x0, 0x0) 02:22:02 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400038001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:02 executing program 1 (fault-call:8 fault-nth:14): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:02 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="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", 0x1a0}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 210.023613][T17374] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:02 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xa000000, 0x0, 0x0) [ 210.131644][T17389] loop4: detected capacity change from 0 to 270 [ 210.138842][T17392] loop5: detected capacity change from 0 to 192 [ 210.148480][T17389] FAT-fs (loop4): bogus logical sector size 768 [ 210.154770][T17389] FAT-fs (loop4): Can't find a valid FAT filesystem [ 210.167492][T17392] isofs_fill_super: root inode is not a directory. Corrupted media? [ 210.183056][T17395] FAULT_INJECTION: forcing a failure. [ 210.183056][T17395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.196775][T17395] CPU: 1 PID: 17395 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 210.205516][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.215712][T17395] Call Trace: [ 210.218999][T17395] dump_stack_lvl+0xb7/0x103 [ 210.223568][T17395] dump_stack+0x11/0x1a [ 210.227766][T17395] should_fail+0x23c/0x250 [ 210.232216][T17395] __alloc_pages+0x102/0x320 [ 210.236870][T17395] alloc_pages_vma+0x513/0x680 [ 210.241691][T17395] ? __brelse+0x2c/0x50 [ 210.245839][T17395] ? xas_load+0x284/0x2a0 [ 210.250155][T17395] ? mark_page_accessed+0x1e3/0x550 [ 210.255417][T17395] wp_page_copy+0x121/0x10c0 [ 210.260078][T17395] ? put_dec_trunc8+0x10e/0x130 [ 210.264924][T17395] ? should_fail+0x2a/0x250 [ 210.269482][T17395] do_wp_page+0x5a8/0xba0 [ 210.273797][T17395] handle_mm_fault+0xb11/0x1a50 [ 210.278742][T17395] do_user_addr_fault+0x609/0xbe0 [ 210.283821][T17395] exc_page_fault+0x91/0x220 [ 210.288464][T17395] asm_exc_page_fault+0x1e/0x30 [ 210.293307][T17395] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 210.299911][T17395] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 210.319556][T17395] RSP: 0018:ffffc900034abba0 EFLAGS: 00010202 [ 210.325610][T17395] RAX: ffff8881351f1a60 RBX: ffff888132328177 RCX: 0000000000000e7d [ 210.333571][T17395] RDX: 0000000000000e7d RSI: ffff888132328177 RDI: 0000000020001380 [ 210.341522][T17395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001ffffffffffff [ 210.349473][T17395] R10: 0001888132328ff3 R11: ffff8881351f1080 R12: 0000000000000e7d [ 210.357479][T17395] R13: 0000000000000177 R14: ffff88812cc55038 R15: 0000000020001380 [ 210.365482][T17395] _copy_to_iter+0x1a5/0xbc0 [ 210.370131][T17395] ? check_stack_object+0x61/0x70 [ 210.375144][T17395] ? __virt_addr_valid+0x15a/0x1a0 [ 210.380317][T17395] ? __check_object_size+0x253/0x310 [ 210.385660][T17395] seq_read_iter+0x7f2/0x930 [ 210.390243][T17395] do_iter_readv_writev+0x2e8/0x360 [ 210.395548][T17395] do_iter_read+0x109/0x4b0 [ 210.400207][T17395] do_preadv+0x13b/0x230 [ 210.404472][T17395] ? __fget_light+0x21b/0x260 [ 210.409130][T17395] ? __cond_resched+0x11/0x40 [ 210.413799][T17395] ? fput+0x2d/0x130 [ 210.417757][T17395] ? ksys_write+0x157/0x180 [ 210.422335][T17395] __x64_sys_preadv+0x54/0x60 [ 210.427114][T17395] do_syscall_64+0x3d/0x90 [ 210.431578][T17395] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.437486][T17395] RIP: 0033:0x4665e9 [ 210.441365][T17395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.460952][T17395] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 210.469358][T17395] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 02:22:02 executing program 1 (fault-call:8 fault-nth:15): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 210.477325][T17395] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 210.485325][T17395] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.493355][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.501309][T17395] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 210.525191][T17389] loop4: detected capacity change from 0 to 270 [ 210.533997][T17389] FAT-fs (loop4): bogus logical sector size 768 [ 210.540321][T17389] FAT-fs (loop4): Can't find a valid FAT filesystem [ 210.555027][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.563559][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 210.576690][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.584754][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:02 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:02 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400048001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:03 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xc020000, 0x0, 0x0) [ 210.677959][T17408] FAULT_INJECTION: forcing a failure. [ 210.677959][T17408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.691422][T17408] CPU: 1 PID: 17408 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 210.700169][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.710405][T17408] Call Trace: [ 210.713743][T17408] dump_stack_lvl+0xb7/0x103 [ 210.718314][T17408] dump_stack+0x11/0x1a [ 210.722503][T17408] should_fail+0x23c/0x250 [ 210.726918][T17408] __alloc_pages+0x102/0x320 [ 210.731510][T17408] alloc_pages_vma+0x513/0x680 [ 210.736261][T17408] do_anonymous_page+0x16e/0x8a0 [ 210.741360][T17408] ? do_wp_page+0x5a8/0xba0 [ 210.745840][T17408] handle_mm_fault+0x98f/0x1a50 [ 210.750709][T17408] ? finish_task_switch+0xce/0x290 [ 210.755946][T17408] do_user_addr_fault+0x609/0xbe0 [ 210.760970][T17408] exc_page_fault+0x91/0x220 [ 210.765547][T17408] asm_exc_page_fault+0x1e/0x30 [ 210.770468][T17408] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 210.777075][T17408] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 210.796747][T17408] RSP: 0018:ffffc900024c3ba0 EFLAGS: 00010202 [ 210.802834][T17408] RAX: ffff888109036aa0 RBX: ffff888132328177 RCX: 00000000000001fd [ 210.810928][T17408] RDX: 0000000000000e7d RSI: ffff888132328df7 RDI: 0000000020002000 [ 210.818909][T17408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001ffffffffffff [ 210.826871][T17408] R10: 0001888132328ff3 R11: ffff8881090360c0 R12: 0000000000000e7d [ 210.834905][T17408] R13: 0000000000000177 R14: ffff88812cc55038 R15: 0000000020001380 [ 210.842960][T17408] _copy_to_iter+0x1a5/0xbc0 [ 210.847582][T17408] ? check_stack_object+0x61/0x70 [ 210.852588][T17408] ? __virt_addr_valid+0x15a/0x1a0 [ 210.857693][T17408] ? __check_object_size+0x253/0x310 [ 210.862983][T17408] seq_read_iter+0x7f2/0x930 [ 210.867613][T17408] do_iter_readv_writev+0x2e8/0x360 [ 210.872819][T17408] do_iter_read+0x109/0x4b0 [ 210.877316][T17408] do_preadv+0x13b/0x230 [ 210.881549][T17408] ? __fget_light+0x21b/0x260 [ 210.886202][T17408] ? __cond_resched+0x11/0x40 [ 210.890943][T17408] ? fput+0x2d/0x130 [ 210.894842][T17408] ? ksys_write+0x157/0x180 [ 210.899322][T17408] __x64_sys_preadv+0x54/0x60 [ 210.903990][T17408] do_syscall_64+0x3d/0x90 [ 210.908387][T17408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.914285][T17408] RIP: 0033:0x4665e9 [ 210.918212][T17408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.938070][T17408] RSP: 002b:00007fd903d84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 210.946523][T17408] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 210.954573][T17408] RDX: 00000000000000c7 RSI: 0000000020000940 RDI: 0000000000000003 [ 210.962536][T17408] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.970489][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.978452][T17408] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 210.989338][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 210.997378][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 211.008882][T17371] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.016898][T17371] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:03 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:03 executing program 1 (fault-call:8 fault-nth:16): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:03 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf000000, 0x0, 0x0) 02:22:03 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 211.062777][T17417] loop5: detected capacity change from 0 to 192 [ 211.074785][T17418] loop4: detected capacity change from 0 to 270 02:22:03 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400058001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 211.128627][T17415] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.161568][T17435] loop5: detected capacity change from 0 to 192 [ 211.168257][T17431] FAULT_INJECTION: forcing a failure. 02:22:03 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x18000000, 0x0, 0x0) [ 211.168257][T17431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.181529][T17431] CPU: 1 PID: 17431 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 211.190405][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.200538][T17431] Call Trace: [ 211.203881][T17431] dump_stack_lvl+0xb7/0x103 [ 211.208468][T17431] dump_stack+0x11/0x1a [ 211.212672][T17431] should_fail+0x23c/0x250 [ 211.217108][T17431] should_fail_usercopy+0x16/0x20 [ 211.222178][T17431] _copy_to_user+0x1c/0x90 [ 211.226652][T17431] simple_read_from_buffer+0xab/0x120 [ 211.232019][T17431] proc_fail_nth_read+0xf6/0x140 [ 211.237037][T17431] ? rw_verify_area+0x136/0x250 [ 211.241871][T17431] ? proc_fault_inject_write+0x200/0x200 [ 211.247508][T17431] vfs_read+0x154/0x5d0 [ 211.251658][T17431] ? __fget_light+0x21b/0x260 [ 211.256355][T17431] ? __cond_resched+0x11/0x40 [ 211.261049][T17431] ksys_read+0xce/0x180 [ 211.265191][T17431] __x64_sys_read+0x3e/0x50 [ 211.269779][T17431] do_syscall_64+0x3d/0x90 [ 211.274182][T17431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.280087][T17431] RIP: 0033:0x41936c [ 211.284082][T17431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 211.303698][T17431] RSP: 002b:00007fd903d84170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.312093][T17431] RAX: ffffffffffffffda RBX: 0000000000000ff4 RCX: 000000000041936c [ 211.320114][T17431] RDX: 000000000000000f RSI: 00007fd903d841e0 RDI: 0000000000000004 02:22:03 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 211.328081][T17431] RBP: 00007fd903d841d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.336075][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.344032][T17431] R13: 00007ffe39c333af R14: 00007fd903d84300 R15: 0000000000022000 [ 211.362439][T17435] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 211.383517][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.391551][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 211.404077][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.412155][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 211.474558][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.482563][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 211.501178][T17449] loop4: detected capacity change from 0 to 270 [ 211.517594][T17449] FAT-fs (loop4): bogus logical sector size 1280 02:22:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2e}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:03 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x18020000, 0x0, 0x0) [ 211.520585][T17450] loop5: detected capacity change from 0 to 192 [ 211.523988][T17449] FAT-fs (loop4): Can't find a valid FAT filesystem [ 211.524954][T17426] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.544962][T17426] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 211.548077][T17450] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:03 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:03 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x20000000, 0x0, 0x0) 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0xff4}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {0x0, 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x24000000, 0x0, 0x0) [ 211.612678][T17449] loop4: detected capacity change from 0 to 270 [ 211.636086][T17449] FAT-fs (loop4): bogus logical sector size 1280 [ 211.642458][T17449] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400068001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2000006a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 211.686369][T17476] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 211.779151][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.787181][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 211.799774][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.807762][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 211.848734][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.856782][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 211.875495][T17494] loop4: detected capacity change from 0 to 270 [ 211.888250][T17496] loop5: detected capacity change from 0 to 192 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x7ffff000}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3c000000, 0x0, 0x0) [ 211.898705][T17494] FAT-fs (loop4): bogus logical sector size 1536 [ 211.905084][T17494] FAT-fs (loop4): Can't find a valid FAT filesystem [ 211.923209][T17496] isofs_fill_super: root inode is not a directory. Corrupted media? [ 211.931504][T17473] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 211.939586][T17473] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 211.944315][T17493] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.978419][T17494] loop4: detected capacity change from 0 to 270 [ 211.988829][T17494] FAT-fs (loop4): bogus logical sector size 1536 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:04 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 211.995219][T17494] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xfca}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400078001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x41020000, 0x0, 0x0) 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 212.055550][T17520] loop5: detected capacity change from 0 to 192 [ 212.076590][T17520] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 212.129356][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.137560][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 212.150059][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.158075][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 212.209675][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.217731][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 212.232842][T17535] loop4: detected capacity change from 0 to 270 [ 212.249847][T17540] loop5: detected capacity change from 0 to 192 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x58000000, 0x0, 0x0) 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x2000091b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900), 0x0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 212.260532][T17535] FAT-fs (loop4): bogus logical sector size 1792 [ 212.267027][T17535] FAT-fs (loop4): Can't find a valid FAT filesystem [ 212.276621][T17517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.284719][T17517] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 212.296325][T17540] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:04 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 212.338528][T17539] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.350225][T17535] loop4: detected capacity change from 0 to 270 [ 212.367218][T17535] FAT-fs (loop4): bogus logical sector size 1792 [ 212.373634][T17535] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x67e0939d, 0x0, 0x0) 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x7fffefd6}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000f8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 212.399093][T17559] loop5: detected capacity change from 0 to 192 [ 212.419338][T17559] isofs_fill_super: root inode is not a directory. Corrupted media? 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:04 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x91ffffff, 0x0, 0x0) 02:22:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400228001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf6f}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 212.520005][T17579] loop4: detected capacity change from 0 to 270 [ 212.531784][T17579] FAT-fs (loop4): bogus logical sector size 3840 [ 212.538313][T17579] FAT-fs (loop4): Can't find a valid FAT filesystem [ 212.540619][T17580] loop5: detected capacity change from 0 to 192 02:22:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:04 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 212.625551][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.633991][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 212.646087][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.654073][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:05 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x9d93e067, 0x0, 0x0) [ 212.698698][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.706739][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 212.719555][T17594] loop4: detected capacity change from 0 to 270 [ 212.730293][T17596] loop5: detected capacity change from 0 to 192 [ 212.734004][T17594] FAT-fs (loop4): bogus logical sector size 8704 02:22:05 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200"/208, 0xd0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 212.742918][T17594] FAT-fs (loop4): Can't find a valid FAT filesystem [ 212.749953][T17561] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 212.757962][T17561] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 212.818495][T17601] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.819597][T17594] loop4: detected capacity change from 0 to 270 [ 212.834164][T17611] loop5: detected capacity change from 0 to 192 02:22:05 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x200008b2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) 02:22:05 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e63", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:05 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xcbbeffff, 0x0, 0x0) [ 212.877746][T17594] FAT-fs (loop4): bogus logical sector size 8704 [ 212.884305][T17594] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:05 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400fe8001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:05 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd7ff0000, 0x0, 0x0) 02:22:05 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x7fffef7b}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 212.933570][T17626] loop5: detected capacity change from 0 to 192 [ 213.044096][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.052194][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 213.064626][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.072683][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 213.110282][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.118307][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 213.143161][T17646] loop4: detected capacity change from 0 to 270 [ 213.144821][T17645] loop5: detected capacity change from 0 to 192 02:22:05 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x138, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xe7d}], 0xc7, 0x0, 0x0) [ 213.152497][T17622] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.163677][T17622] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 213.170340][T17646] FAT-fs (loop4): bogus logical sector size 65024 [ 213.181156][T17646] FAT-fs (loop4): Can't find a valid FAT filesystem 02:22:05 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd7ffffff, 0x0, 0x0) 02:22:05 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 213.248116][T17660] loop5: detected capacity change from 0 to 192 [ 213.262238][T17646] loop4: detected capacity change from 0 to 270 02:22:05 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc2e}], 0xc7, 0x0, 0x0) 02:22:05 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xe8030000, 0x0, 0x0) [ 213.294973][T17646] FAT-fs (loop4): bogus logical sector size 65024 [ 213.295006][T17655] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.301460][T17646] FAT-fs (loop4): Can't find a valid FAT filesystem [ 213.383405][T17646] ================================================================== [ 213.391494][T17646] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu [ 213.399287][T17646] [ 213.401597][T17646] write to 0xffff888237d42f10 of 8 bytes by task 17655 on cpu 1: [ 213.409291][T17646] invalidate_bh_lrus_cpu+0xad/0xe0 [ 213.414495][T17646] lru_add_drain_cpu+0x243/0x270 [ 213.419422][T17646] __pagevec_release+0x57/0xa0 [ 213.424196][T17646] __filemap_fdatawait_range+0x141/0x1b0 [ 213.429814][T17646] filemap_write_and_wait_range+0x264/0x390 [ 213.435797][T17646] __iomap_dio_rw+0x4cd/0xa60 [ 213.440471][T17646] iomap_dio_rw+0x30/0x70 [ 213.444789][T17646] ext4_file_read_iter+0x21a/0x290 [ 213.449909][T17646] generic_file_splice_read+0x22a/0x310 [ 213.455530][T17646] splice_direct_to_actor+0x2aa/0x650 [ 213.460886][T17646] do_splice_direct+0xf5/0x170 [ 213.465635][T17646] do_sendfile+0x773/0xda0 [ 213.470034][T17646] __x64_sys_sendfile64+0xf2/0x130 [ 213.475127][T17646] do_syscall_64+0x3d/0x90 [ 213.479539][T17646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.485419][T17646] [ 213.487727][T17646] read to 0xffff888237d42f10 of 8 bytes by task 17646 on cpu 0: [ 213.495343][T17646] has_bh_in_lru+0x31/0x1c0 [ 213.499836][T17646] smp_call_function_many_cond+0x226/0x620 [ 213.505627][T17646] on_each_cpu_cond_mask+0x31/0x40 [ 213.510725][T17646] invalidate_bh_lrus+0x26/0x30 [ 213.515570][T17646] invalidate_bdev+0x4b/0x70 [ 213.520152][T17646] __loop_clr_fd+0x566/0x8f0 [ 213.524730][T17646] lo_ioctl+0xa48/0x1340 [ 213.529047][T17646] blkdev_ioctl+0x1d0/0x3c0 [ 213.533537][T17646] block_ioctl+0x6d/0x80 [ 213.537763][T17646] __se_sys_ioctl+0xcb/0x140 [ 213.542332][T17646] __x64_sys_ioctl+0x3f/0x50 [ 213.546917][T17646] do_syscall_64+0x3d/0x90 [ 213.551318][T17646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.557199][T17646] [ 213.559506][T17646] value changed: 0xffff888106a33888 -> 0x0000000000000000 [ 213.566598][T17646] [ 213.568902][T17646] Reported by Kernel Concurrency Sanitizer on: [ 213.575027][T17646] CPU: 0 PID: 17646 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 02:22:05 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028002000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 213.583787][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.593843][T17646] ================================================================== [ 213.629711][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.637925][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 213.650212][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.658230][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:06 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0x20010fb6}], 0xc7, 0x0, 0x0) [ 213.700703][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.705543][T17686] loop5: detected capacity change from 0 to 192 [ 213.708859][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 213.736694][T17691] loop4: detected capacity change from 0 to 270 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028003000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf4010000, 0x0, 0x0) [ 213.768678][T17667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 213.776761][T17667] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:06 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf5ffffff, 0x0, 0x0) 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028004000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 213.837548][T17706] loop4: detected capacity change from 0 to 270 [ 213.849001][T17694] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.853480][T17709] loop5: detected capacity change from 0 to 192 02:22:06 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x16c, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0x7fffee89}], 0xc7, 0x0, 0x0) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfeffffff, 0x0, 0x0) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x8, 0x0, 0x0) [ 214.002521][T17732] loop4: detected capacity change from 0 to 270 02:22:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028005000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 214.066381][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.074504][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.087227][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.095325][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:06 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 214.135684][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.143712][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.150023][T17743] loop5: detected capacity change from 0 to 192 [ 214.171486][T17749] loop4: detected capacity change from 0 to 270 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xff0f0000, 0x0, 0x0) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 214.189931][T17712] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.198037][T17712] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:06 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff07}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028006000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffbecb, 0x0, 0x0) [ 214.272548][T17764] loop5: detected capacity change from 0 to 192 [ 214.279711][T17752] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.309026][T17771] loop4: detected capacity change from 0 to 270 02:22:06 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028007000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x2, 0x0) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffff91, 0x0, 0x0) [ 214.420501][T17787] loop5: detected capacity change from 0 to 192 [ 214.445314][T17791] loop4: detected capacity change from 0 to 270 02:22:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:06 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x186, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x3, 0x0) 02:22:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028008000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:06 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffd7, 0x0, 0x0) [ 214.519288][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.527433][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.540023][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.548155][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 214.599325][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.607444][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.648076][T17812] loop5: detected capacity change from 0 to 192 [ 214.655739][T17813] loop4: detected capacity change from 0 to 270 [ 214.658741][T17768] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.670219][T17768] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:07 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x934e0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028009000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfffffff5, 0x0, 0x0) 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x4, 0x0) [ 214.709933][T17809] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfffffffe, 0x0, 0x0) [ 214.775644][T17829] loop5: detected capacity change from 0 to 192 [ 214.783624][T17830] loop4: detected capacity change from 0 to 270 02:22:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800a000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x5, 0x0) 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x28372fcea0, 0x0, 0x0) [ 214.895014][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.903039][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.915466][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.923465][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000, 0x0, 0x0) [ 214.966951][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 214.975000][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 214.993417][T17852] loop5: detected capacity change from 0 to 192 [ 214.999926][T17856] loop4: detected capacity change from 0 to 270 [ 215.029749][T17828] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.037792][T17828] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x193, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800b000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:07 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x6, 0x0) [ 215.087490][T17859] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.124097][T17875] loop5: detected capacity change from 0 to 192 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a0802000001000001", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 215.133511][T17876] loop4: detected capacity change from 0 to 270 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800c000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x7, 0x0) [ 215.209066][T17886] loop5: detected capacity change from 0 to 192 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4000000000000, 0x0, 0x0) 02:22:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 215.265515][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.273538][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 215.285709][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.293733][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 215.339530][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.347594][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 215.367537][T17896] loop4: detected capacity change from 0 to 270 [ 215.371094][T17874] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800d000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) [ 215.381867][T17874] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x8, 0x0) 02:22:07 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b2ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:07 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19a, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) [ 215.428581][T17906] loop5: detected capacity change from 0 to 192 02:22:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800f000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x9, 0x0) [ 215.501499][T17918] loop4: detected capacity change from 0 to 270 02:22:07 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x5000000000000, 0x0, 0x0) [ 215.568238][T17908] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.633151][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.641185][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 215.653257][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.661396][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 215.695883][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.703935][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 215.707650][T17932] loop4: detected capacity change from 0 to 270 [ 215.726587][T17935] loop5: detected capacity change from 0 to 192 02:22:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028010000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:08 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="d95d0b5cccb91d6dae4191c8ae7f69e9088d938b27e22ed147a2a70a29e6d412465c42da99dbb57d35f4843d7d3ab3876e19d518391bc855ee54fe828181ca99f63c6dc6731068d678b36ed0190acaf8179d3fe0270cc9dabaa0770d4fc8112340157e03384ee604293fb235fc07f76758923a6b9a96f418c4ae48dc1cad316086036eb985be6cc1b71919034a84852d0436e806f178f0e69a983700bd123ea6e71dfc38c43ad516aa1e74825c33cad80d20e80fbc5ed88fa4d0eb77123f11dd70e90fe63b8b841fee8e5643ebed0646c8bde694144ac0de06c8a85251e2ae5db66fa56817ff750fef0bfe36604feb40511d6c3aef9e66accc5f", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xa, 0x0) [ 215.745365][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.753480][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xb, 0x0) 02:22:08 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x100000000000000, 0x0, 0x0) [ 215.901847][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.909986][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 215.922285][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.930382][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 [ 215.972428][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 215.980453][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xc, 0x0) [ 216.021449][T17961] loop4: detected capacity change from 0 to 270 [ 216.022700][T17962] loop5: detected capacity change from 0 to 192 [ 216.046078][T17910] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.054177][T17910] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:08 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:08 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028011000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000080001"], 0x48}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c01000019000100000000000000000002"], 0x11c}, {&(0x7f00000002c0)={0x3a8, 0x28, 0x300, 0x70bd29, 0x35dfdbfc, "", [@generic="34f67b867251e6b20a607038394bcfa4003e7b1799a9d96dd387a4ee18907a6e0bbd0668ecc43d9b84cb23e3e54b504b0925ec848e1b9a2c22892aefb8e615e57e", @nested={0x354, 0x15, 0x0, 0x1, [@typed={0x17, 0x6b, 0x0, 0x0, @str='cgroup.controllers\x00'}, @generic="5ba9471a55e8bd53c4bc9e7d999fb63d438d23d4c5eed37b09303fa1d612", @generic="764e8b0c4df5931cb3ef68360bfa371add1321635ad40726dc29ac781198a8f272806418f8c976124b35115278c45c2081415b2aa7cd1b4050b6ed02d4741789425029c499b1bfb285931750172061316bbcc500786840a8ca6e2a455850f89a0dcf250dc9ecbd258d07eb4b7fafc1f85c", @generic="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", @generic="39fd074c2178ab344f682a500c90db8845903798a29614b26e79f45c16e83bbfc4d3b0dc85bfd78534155e4f2bfd4e74964606e92738ad3c0ca410d101765f973b17c63c292ba8b200d586cb51fc95c9db0ec8196bacda402fd2aa285445dd546c959cd12e8b525de22587e94512652bfc379898ab0ff78de80fff7b002f020e64fb06b15871635f38e5e7847b0b764b4e15c0837730bdcb0ca35c339b7eb09b88da56b7c01eeb09b076cb8a40028ab5dd76096f67e87a72b26b8ddd397d7e74c6aa9061ae77b2", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffff81}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="613f66fe4af01f9ab08eb6202427b853589c892a0993cec1d546ca0ef05d5d04e41c931256130eaa5b87d24cfe58d9a303ba1a79214ee8bd9908e833c81e387a15fd8938964360ddca60de9ed8cce31e3ac102eb3a5c0d8ab747a333408f1ab659d46d8906f9662e32514b66ffa5c2db705f178356180b0e9f01f557e03ab2ae1e5d8a8ae44a265866a5520ed540d18c723cff6a276ab29b322881e6c615227e5e76590280e53981c6f7181829afda7f1f511ddf1166c4efb8e5c825a64bf7a4faab9a9f4842ef8c1bfd097c328bf17adc3def2e"}]}]}, 0x3a8}], 0x2, 0x0, 0x0, 0x4048090}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd, 0x0) [ 216.155317][T17977] loop4: detected capacity change from 0 to 270 [ 216.170286][T17979] loop5: detected capacity change from 0 to 192 02:22:08 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19d, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028014000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:08 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x200000000000000, 0x0, 0x0) 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xe, 0x0) [ 216.298023][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.306056][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 216.318405][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.326447][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:08 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010900)="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", 0x19f, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e", 0x50, 0xc000}], 0x0, &(0x7f0000011700)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)=@xfs={0x1c, 0x81, {0x16c0bc16, 0x2, 0x8, 0x100}}, &(0x7f0000000180), 0x1000) 02:22:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028022000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000001c0)={[{@utf8no}]}) 02:22:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x10, 0x0) [ 216.380330][T17999] loop4: detected capacity change from 0 to 270 [ 216.384355][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.394659][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000095b2ef3e [ 216.411290][T18006] loop5: detected capacity change from 0 to 192 [ 216.467919][T17975] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 216.476102][T17975] ref_ctr decrement failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000fc27b1a7 02:22:08 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:22:08 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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